9261 matches found
PT-2019-16738 · Gnome +7 · Gnome Shell +7
Name of the Vulnerable Software and Affected Versions: gnome-shell versions 3.15.91 and later Description: The gnome-shell lock screen does not properly restrict all contextual actions, allowing an attacker with physical access to a locked workstation to invoke certain keyboard shortcuts and...
Self-Encrypting Drive Vulnerabilities - US
Lenovo Security Advisory: LEN-25256 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12037, CVE-2018-12038, CVE-2019-10636, CVE-2019-10705, CVE-2019-10706, CVE-2019-11686 Summary Description: As reported in CERT Coordination Center...
Active Scans Target Vulnerable Cisco Routers for Remote Code-Execution
UPDATE Malicious scanning activity targeting Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN routers is underway, with a swell of opportunistic probes looking for vulnerable devices ramping up since Friday. According to Bad Packets Report’s honeypot data, cyberattackers are targeting a...
Code injection
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...
CVE-2018-19009
CVE-2018-19009 affects Pilz PNOZmulti Configurator (all versions prior to 10.9). The vulnerability stems from clear-text storage of credentials, enabling an authenticated local attacker to view sensitive PMI m107 diag HMI credentials and, with physical access, potentially modify data on that HMI....
CVE-2018-19009
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...
CVE-2019-6260
The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...
CVE-2019-6260
The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...
This Week in Security News: Risky Radio Remotes and Cybercrime
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Trend Micro’s new research on radio frequency technology and the risks of radio remote controllers. Also, understand why there i...
CVE-2019-2541
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...
CVE-2019-2503
Disclaimer: This data contains information about vulnerable...
UBUNTU-CVE-2019-2503
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical...
Why Internet Security Is So Bad
I recently read two different essays that make the point that while Internet security is terrible, it really doesn't affect people enough to make it an issue. This is true, and is something I worry will change in a world of physically capable computers. Automation, autonomy, and physical agency...
System x Secure Boot Vulnerability - Lenovo Support US
No description provided...
System x Secure Boot Vulnerability - US
Lenovo Security Advisory: LEN-20241 Potential Impact: Booting unauthenticated code Severity: High Scope of Impact: Lenovo-only CVE Identifier: CVE-2017-3775 Summary Description: Lenovo internal testing discovered some System x server BIOS/UEFI versions that, when Secure Boot mode is enabled by a...
Input validation
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2017-3718
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2017-3718
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2017-3718
Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...
Firmware Authentication Bypass - US
Lenovo Security Advisory: LEN-23849 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: Intel has reported a potential security vulnerability allowing an attacker with physical access to bypass firmware authentication...